[Mimedefang] Dropping Klez -- How to filter?

[James Miller]

Hi everyone,

I saw somewhere (thus the reason for this question) a great way to drop, in
this case, messages with klez and to quarantine everything else.  I
currently have mimedefang set to quarantine everything, but I'm not
confident enough to write 'if kelz drop else quarantine'.  If someone could
share what they do or a link to a URL I'd be most grateful.  I did find
something on a web site but it didn't seem complete and wasn't what I had
seen (kicking self for not book marking).

return action_discard() if $VirusName =~ /klez|bugbear/i;

How could I work this in to my filter?

--mimedefang-filter snippet--
sub filter ($$$$) {
    my($entity, $fname, $ext, $type) = @_;

if ($FoundVirus) {
	my($code, $category, $action);
	$VirusScannerMessages = "";
	($code, $category, $action) = entity_contains_virus($entity);
          md_log('virus',$VirusName, $RelayAddr);
	    action_quarantine($entity, "A known virus was discovered and deleted.
Virus-scanner messages follow:\n$VirusScannerMessages\n\n");
	    send_quarantine_notifications();
	    return;



Thank you for your help,
Jim